Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/FJm1VmN3H1bcjF0IyTLo3Iw2RnU.roa
File: FJm1VmN3H1bcjF0IyTLo3Iw2RnU.roa (raw, json)
Hash identifier: oAa1rNGgy1lTpI22OI+E6ekrGFv75BpZ977a40fnsI0=
Subject key identifier: 14:99:B5:56:63:77:1F:56:DC:8C:5D:08:C9:32:E8:DC:8C:36:46:75
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 018CC8DFA8F2DD0DA230729B0A6F3B356E2D
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/FJm1VmN3H1bcjF0IyTLo3Iw2RnU.roa
Signing time: Tue 02 Jan 2024 06:32:30 +0000
ROA not before: Tue 02 Jan 2024 06:32:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 150179
IP address blocks: 45.155.227.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Feb 2024 01:38:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:a8:f2:dd:0d:a2:30:72:9b:0a:6f:3b:35:6e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jan 2 06:32:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1499b55663771f56dc8c5d08c932e8dc8c364675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d4:54:04:c1:a7:ce:ae:18:67:e0:9f:c6:bc:
43:b6:f5:78:b2:f0:d8:db:9f:d2:fc:0e:e3:f2:f3:
4e:9c:7e:17:ee:51:3c:43:fb:d5:79:7a:6d:74:b5:
93:40:f9:50:41:29:4f:ad:7a:1e:27:66:3f:f5:65:
fd:7d:eb:42:43:ec:1c:f2:7b:64:9a:28:3a:c2:dd:
1e:8e:e6:fe:94:fb:1e:dc:ae:53:94:9f:20:2b:48:
53:4e:52:10:12:9f:74:2c:86:05:2b:29:b8:99:c0:
31:80:9e:9f:5b:3b:fa:2e:f3:af:f9:53:3d:7b:59:
f2:30:47:b6:a9:4d:83:70:f1:e6:7e:20:de:f8:16:
d9:a9:ab:74:d0:e4:df:e6:58:17:80:a6:83:ac:3d:
79:31:a8:c8:67:8d:67:d0:3e:45:ab:1a:a4:f8:3f:
76:0e:c9:ed:57:06:16:20:59:dc:3f:c6:9e:a1:19:
91:5f:2a:2f:ce:90:e2:f4:a2:6b:00:6c:c7:1c:7a:
4d:c5:81:68:24:b4:8b:7b:78:9f:71:b7:c5:18:0b:
e0:7b:40:e4:d0:78:6b:8c:41:fd:0f:09:78:1f:da:
e7:74:46:c2:28:94:7c:b7:9b:6d:98:de:ca:f3:4b:
28:4a:a1:c3:e8:c3:b1:4a:f2:45:14:47:8e:d4:54:
4a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:99:B5:56:63:77:1F:56:DC:8C:5D:08:C9:32:E8:DC:8C:36:46:75
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/FJm1VmN3H1bcjF0IyTLo3Iw2RnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.227.0/24
Signature Algorithm: sha256WithRSAEncryption
78:1a:c2:e4:17:56:84:7d:df:d5:3d:19:fe:1b:18:ee:37:66:
39:93:40:27:13:a2:22:18:62:13:7d:0a:f2:da:13:86:79:c3:
c2:30:f9:30:1b:7c:1c:c1:90:71:b7:d6:79:e2:fd:5c:5c:eb:
65:8c:38:ed:77:1b:b5:b2:ef:60:d5:f8:79:00:4a:e1:e7:cf:
7d:2c:ba:3c:cf:90:63:8e:d9:c2:0d:96:82:05:90:3c:13:54:
02:e2:ee:d0:73:78:de:24:3e:7b:c3:84:d3:7f:c6:dd:54:bf:
a1:93:b5:53:06:6b:f3:5d:59:86:a5:2d:02:8c:1f:9c:cc:fc:
b1:72:e9:bc:ea:13:c6:4e:35:39:0b:1c:73:ec:80:57:47:ba:
d8:8e:b5:bf:18:95:4c:5c:31:8b:0a:e9:7c:8b:ec:9b:65:66:
fb:a2:9b:49:02:4c:b6:28:f8:20:0e:bf:94:59:b8:8c:21:95:
41:13:70:8a:20:49:3a:8c:d5:de:be:c7:b2:e5:f9:da:fd:ca:
1d:0c:24:cd:fd:53:26:d5:23:42:2f:e1:79:f2:c6:f1:3e:8e:
7a:08:a5:4d:fc:65:0b:d9:65:e7:64:32:ed:40:85:3b:26:65:
39:04:0a:4f:51:5f:56:57:db:eb:51:7d:ca:46:0b:8c:52:f3:
b4:9a:82:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:03:54 2025 by rpki-client